A private, TLS-secured NATS message broker for service-to-service messaging in your own AWS account. Includes per-user subject permissions, the nats CLI and a built-in walkthrough. Certificates and passwords are generated on each instance at first boot.
Run a private message bus for your services inside your own VPC. This image starts NATS Server v2.15.0 as a Core NATS broker over TLS, with three example users and subject permissions already set, plus the official nats CLI for quick tests. JetStream is off.
Launch the approved version on t3.medium with at least 16 GiB encrypted root storage and at least 2 GiB RAM. Connect with AWS Systems Manager as ubuntu or restrict SSH to your administrative CIDR. First boot creates TLS material, local NATS users and subject permissions; nothing sensitive is baked into the image. NATS listens on tls://127.0.0.1:4222 with HTTP monitoring on 127.0.0.1:8222. Use Session Manager port forwarding or a private proxy for client access. Keep credentials out of recordings and tickets.
The standard software fee is described in the AWS Marketplace offer terms. EC2, EBS and data-transfer charges are billed separately. See the offer terms for applicable billing promotions.
After launch, wait for cloud-init to finish, then follow the bundled README for configuration, backup and day-2 operations. IAM is optional unless you add AWS-targeted automation. JetStream, clustering and leafnodes are out of scope for this Core offer.
Reach it from other machines: To serve other hosts, change the listen address to the instance's private IP, issue a server certificate that includes that address (the Configuration guide has the commands) and allow TCP 4222 only from your clients' security group. Keep TLS on.
This is a repackaged open source software product wherein additional charges apply for independent AWS packaging, validation, maintenance and setup documentation. Synadia and the NATS Authors publish nats-server and natscli under Apache-2.0; Software Sushi supplies the AMI recipe, pinned official linux/amd64 binaries, first-boot TLS and local users, loopback defaults, and setup documentation without claiming upstream endorsement.
Highlights
Pinned NATS Server v2.15.0 and nats CLI v0.5.0 official linux/amd64 binaries with provenance receipts.
Loopback TLS Core NATS defaults with automatic per-instance TLS, users and subject permissions.
Bundled configuration, backup and day-2 operations documentation.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 5 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
This listing uses one pricing dimension. You pay an hourly software fee for the t3.medium instance while it runs. The fee is usage-based, so charges accrue only for the hours the instance is active. There are no tiers or separate add-ons to choose from. AWS bills EC2, EBS storage, and data transfer separately from this software fee. Running the recommended t3.medium with an encrypted gp3 root volume keeps your costs tied directly to runtime.
Top-of-mind questions for buyers
What do I get for the hourly t3.medium fee?
You run the NATS Core broker on a t3.medium EC2 instance. The image includes the NATS Server 2.15.0, the nats CLI, a systemd service, and loopback TLS with example users. You add your own encrypted gp3 root volume of at least 16 GiB.
Am I charged when the instance is stopped?
The hourly software fee accrues only while the instance runs. A fully stopped instance does not accrue the software fee. AWS may still bill EBS storage and other resources for a stopped instance, since those charges are separate from this software fee.
What costs are separate from this hourly software fee?
AWS bills EC2 compute, EBS storage, and data transfer separately from the software fee. The recommended setup uses an encrypted gp3 root volume of at least 16 GiB. You connect through AWS Systems Manager Session Manager, so no inbound security group rules are needed.
docs.softwaresushi.com
Helpful?
Vendor refund policy
We offer a full refund of software charges for the first 48 hours billing starts if the product does not perform as described. To request a refund, email info@softwaresushi.com with your EC2 instance ID and a description of the issue. AWS infrastructure costs (EC2, EBS, data transfer) are not eligible for refund by us.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
NATS Server v2.15.0 and nats CLI v0.5.0 on Ubuntu 24.04 LTS for t3.medium. Includes loopback TLS Core NATS on 127.0.0.1:4222, HTTP monitoring on 127.0.0.1:8222, username identity with subject permissions, first-boot TLS and credentials, and JetStream off. Connect with Session Manager as ubuntu and run bash /opt/sushi/docs/demo.sh after first boot.
Additional details
Usage instructions
Launch t3.medium with at least 16 GiB encrypted gp3 root storage. Use AWS Systems Manager Session Manager as ubuntu, or restrict SSH to your administrative CIDR. After first boot, run bash /opt/sushi/docs/demo.sh. Connect NATS clients to tls://127.0.0.1:4222 through port forwarding.
Software Sushi provides AMI packaging and setup guidance. Contact info@softwaresushi.com for installation questions. Support coverage requires a separate agreement. This offer does not include Synadia or NATS project support.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
A clean Ansible control node in your AWS account. ansible-core 2.21.4 in a pinned Python 3.12 environment with two pinned collections, a localhost inventory and an example playbook, ready for your own playbooks and remote hosts over SSH.
OpenHands Core with local Agent Canvas, Python terminal/Git and a private Telegram adapter. Customer cloud-model credentials are required after launch.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.